home-en-ldgre[.]pages[.]dev

PhishDestroy identifies the domain home-en-ldgre.pages.dev as an active crypto drainer phishing threat under investigation, with no confirmed brand impersonation at this time. The domain remains unresolved by VirusTotal security vendors as of the latest scan, indicating a newly deployed or stealthily operated campaign leveraging Cloudflare infrastructure. This domain resolves to IP 172.66.47.116 and is secured with a Google Trust Services SSL certificate, increasing its perceived legitimacy to potential victims.

This domain was flagged by 0 of 95 VirusTotal vendors, registered through Cloudflare, Inc., and operates under Cloudflare Pages. It resolves to IP address 172.66.47.116 and utilizes a Google Trust Services SSL certificate. The domain is currently active and under investigation as a crypto drainer phishing site, with no confirmed association to a specific brand or service. Despite low detection rates, the use of Cloudflare and Google SSL suggests an attempt to evade detection and build trust.

Users should immediately block access to home-en-ldgre.pages.dev at the network level and avoid clicking any links associated with this domain. Security teams are advised to monitor for connections to IP 172.66.47.116 and inspect traffic for crypto wallet drainer signatures. Update DNS blocklists and endpoint protection rules to include this domain and IP. Exercise heightened caution with any unsolicited crypto-related communications referencing this domain.